[DRAFT — pending legal counsel review] This list reflects our current subprocessors. The authoritative list is maintained as part of the DPA, which is in legal sign-off and available on request.
Legal
Subprocessors
The third parties MeshWorks Wireless Oy (Finland) engages to process data on behalf of IRIS customers. We keep this set small and deliberate.
Last updated: [PLACEHOLDER]
Current subprocessors
Cloudflare
European UnionEU edge hosting, compute, and storage — Workers, Durable Objects, D1, KV, and Queues. The platform IRIS runs on.
Twilio
EU / global deliverySMS and voice delivery — the carrier gateway that sends alert messages and places voice/IVR calls to recipients.
Change-notice mechanism
Before we add or replace a subprocessor, we update this page and notify customers in advance — measured from the date the notice email is dispatched — so you have an opportunity to review and object. A shorter-notice carve-out applies for urgent changes required for security, legal, or service-continuity reasons, with your objection right preserved. The exact notice period and objection process are set out in the DPA, which is in legal sign-off.
Subscribe to changes
Customers can subscribe to subprocessor change notifications. Email hello@my-iris.io to be added to the notification list, and we will alert you whenever this list changes.